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IN THE CLAIMS 

Amended clalnis foflow: 
1-6. (Cancelied) 

(( uuonUs Vnicuiicd) ^lomputcj puiLifani ptoiJuot lot (.onuiilhng a ooniputo 
io detect nuiwai'e, saiti cotnpuiof pingtani pioduct cnnipi's^niji 

ilk atLC*>> RquLs! teccuing liijiit opetablc lo iLteivc at an assessment eonipfUet a 
tde access clcaiance icqucst Itom a teqnesting computet, said iik access cicaiance 
jv.LjUv.st including data idenfiismg d computet fik to be aeces'-cd b\ said tequestnig 
compuier; 

ilk av-tcss tlcaKutcc lespon'-e generating logic opeiable in depeudeutc upon said 
data idciUthnig saui cenipuiei iileie tk'teiiunie ti said cenipuiei iilehas picvteusix been 
asses~,cii vis {H^t toiitdining iiialw ate anii to gciietate vi fde access ck-atance tcsponsc, and 

!lle dcce^s ckatance tcsponsc ttdnsniiiung logic tipeiable tu tiansniit sdid tile 
acttss tleannict response to saul teqtiCstuie conipuici, 

uheiem satd aiscsiiueiit Lonipntei sioies a database ofeornputei files and said 
database nuludes ioi ea>.li eoniputei iiie a pLisi->teiKe tKii: indicating wbethci an enU} 
Kiatnig to said tompulei sde should K puiged tiom said d.itabase dttnng puig^ 
operatjoiis; 

uhv-iem said daiaiiase includes lor each cdnipiitct Hie Sicld^ ^peciismga tlk'iiame 
vjfsiud (.tmfptitei fde, data idenifiving said icquesimg (.vimpittef and a sioiage loeatum ol 
said computer fde, and a ehe>.k!>um \aitie >.a!euLUed irom ^aid computLi i"tk- 

N iCuucoiIn ^nlcndcd) <\ coinputci pioiiiani product as elatincd ui ckutn 7. 
wheient sjtd data idetttttsing said eoniputei file includes [fajjsatd t-heeissuitt udne 
takniaied iiotn said corripntci ide 

{( uueiitK \n5ended) \ Ltauputci piograni pioduet as claimed in i.l.\\m 
wherein said data iden{ii\!iig wnd computer file includes one oi more or[fajj^aid 
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fiScnamc of said cooiputcr iWc. said tiuta idcoUiying ^aiti requesting cniiipuicr and 
IjaJJvud slofagc l<x-at!on ol y.nd conipulcf flic, 

iU f(.>ngina!} \ oompiucr program produci as claimed in eiaiii) vvlicrcin if stud 
fiie aecchs dcaiancc lespuiise indicates a scan of said computer i'de is required bs' said 
assCsMn^nt compiuer, theu compiuer iile receiving logic is opcrahie tn rccei\'e at said 
assL'ssnieni eonipiucr >dKl conipmer fde iVom said requesting computer and pcrlornung a 
ntai\sai-'c stan oi saiti computer Hie. 

H. (Original i A compiiter program protiiict as ciamied in claim 7, n\ herein Jt said 
fdc jcccs'; clcdiancc R'^ponsc laJieates jcccsn to said contpiiter (He is denied, then 
iT!ggent!g a dcmed ULxess tesponsc in. s<-iid assessment computer 

12 (L'tevtou*^i\ Pic^entud) A compuiei piugiaiu pioduct a> claimed luclaiiu 7, 
vsJicieiu said database ol'coniptitLi idts spcciUes uhethei Kspcctue computet fdcs 
conifu.n ma i ware. 

J tCLiftenth Amended) \ coniputci piogiam ptodiiLt as cUnmed ni cLiim 12. 
whciciu said database iutUici nuUidcs ioi each cornpnlei Tde artothci Iteldjjsjl spLCd>!rtg 

Oti<^--e>i---tH<:Ht^-'->f--a--Hiy4^tVie-'»:>1--V;Vld--t--t'>rt^pt^t-et--H 

ctJ-n-ijHHui- amirf sktu+se K)t.ats<->?i ui sriHK<->?Hj-Hitoi hie. .+ thui.K-nn-i vaUjo s_aki-ilat^>d kum 
vii-d compiHx^i filx^dnd an access !iag mJitatmg whcilKt acv. css to s.ud v-oniputet {de js 

denied. 

14 {{ higmal) Lompnter ptogram pii>d.uc! as chiinied sn lLuiu 7. wheieni said 
asse.ssmcnt (.omputcr is operable in al least a bigbei le\ el seeunt> nuxie and a lowei Ic\el 
i^et-unty mode, satd assessiitent (.oiitpnter scr\ tng lo den\ access fo greater Kinge id" 
eonipulCi tlics when opeiatiug in said higher level secuni} nwde tompaicd wuh said 
lower level security mode. 
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15. (Oni>ina! i A cooipiacr pmoram prutiuct tSaniicd m ciasat i4, w hcjcut vud 
as*>cssf)icn! conipuicr intigcivti lo L'hdiijiL- iiom y.nd lo\\cr loci scclhiL) mode to s.ikI 
highci ^e^e! set.uius nutde b\ d lock Jtmu UHijicr message }eck:i\ed at said as?.essmei)l 
con^pufer from a amofe computet. 

\(\ {Ch-miuV) A computer ptogiam product as eifimu'd in daun 1. wiKrein a 
pliifahty oi requesting eonipmers shiue .access in asscssmcni oonipiucr deienmmng 
svhethei iiie iiLcess lequests b> fhosc requesiniji Lt>niputers shnuki be dcnsed 

17. (( unenih Amcntlcd) A computer pro^iram protliict ibr controHuig a computer 
u> detv.i.t JUdbAdte. ■^aid coniputer piogr^m product compusmg 

11 !e fiLCCss icquesl detecung logic opctabie to detect a fde ulccss lequest to a 
computer fMc b\ a requesting computer; 

file aci-css t. ieai.Liii.c request gcncrainig logic operable Xo genei.ite a h!e ai.cess 
t. leanuice request mchiding ihaa identiiving saui computer Hie, 

tile dcce^s ckatance tcqucst irdtunuttmg lugic operable Ltt uausrau v,atd file 
actes^, tiearance tcqucst rrni-ii said requesting computet to an assessiiicut cumputei 
responsible An assessment tu wheLliei s<iid eompiuer tile eoiihims maluaie: 

file access clear ance ivquosi n:>.e!Mng loeie opeiabie lt> i-ecei\e ai said as->essnieni 
cuntputci sajd fdcdccess cicaiancs lequcsi trom d r^qiK sting computer. 

liie access ek\ ranee lesjunise genciattng lugiu operable tn dependence ujjon said 
data ideno!\iug ^did eompuiL-t lIL- lo dctcmuuc sT^did eompuiL-t lIL- has pressousi^^ he^-n 
assessed as not ctaitatning malwaic and u> geueKiie a file access ciearance resptmse, 

file access cieatancc I'Csponsc tiansnntinig logic opeiable to trausrnn said tjle 
at.*, ess *,led!duce lesponse ii> said requesting cuniputct; 

rdc a>,cess clearance lesponse receis mg !ogi>, operable to receive al said 
requesting computer said file access clearance response from said assessment computer; 
and 

Hie access permitting logic (^perabie if said file access ciearancc response 
indicates said computer 11 !e does not contain raahvare to permit said tdc access request 
by said requesting computer; 
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wherein said assessment computer stores a tiutabase ni ^ooiputer iWc^ and ^aid 
database includes for each computer t'llc a persistcncx- lla<: indicating uhcthcf an enin 
relating to said computer il!e siionkl be pnnicd tutn) s;iid database dnnng puige 
operations; 

wherein said database niuiudes Ibi cauli coniputci Hie iieidh hpccii\nit/ a filename 
of said computer file, data ideutU>ing said gquc^iiiii: computer and a stoiage !t>catiun of 
^id..cornj?titerilje..and 

18. (Cnn'eniiy Amended) A compuler program product as claimed in claim 17, 
vsbercm said data jdciitifxine said computer tile mcludcN lia||said checksum \alue 
calciddted ifom saui conipuiei iMe 

i'> fC\trr^ntl\ Amended) ^ compmer piogram product .iS cUumed ut cLum \ 'L 
whercm Sfiid data identiistng said computer file includes one ui motv nl [jdjj said 
filename o{ said (.tnnputer file, said data idcmuj mg said tcque^ting compuici and 
j jajj said stoiage location of said computcf file, 

2U tOngnia!) A computei piogiam prodULt as claimed in cLmn 1 7. wUeicin if 
said (lie accL-ss elcamucL- icspt>nsc mdiCiitcs a scan of said computci Hie is icquircd h> 
said assessment computer, tlien eompiiiei file iiausnutting logic is opeiabletii uausinu 
said coinputci liie lioju saui tequcsttng coinputei tu s<-ud assessment coiupuiei, rccei\ ing 
at said assessment computer said computer tile troni sani scquesiiiig computer and 
peifoninijg a itiahvaie scan <.if said ct)it)putei liie 

21 {{ higmal) Lomputer ptogram pii>d.uc! as claimed in eianu J 7, uhctein il 
said tde access eleaianee response mduatcs access to .said eontputci die is denied, then 

triggering a denied access response in said assessment computer, 

22, (Oi-iginaH A toniputer pn>gram ps-oduci as claimed in claim 1 ~. whcrem il 
said file access clearance response indicates access to said computer tile is denied, tiien 
triggering a denied access response in said requesting computer 
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23, (Previousiy Prcseiiied) A computer program prodiici as claimed in cUiini 17, 
wherein said dautbasc of computer files specifies whedier respective computer iUes 
contain maiware, 

24, (C uncnth AnKnd^d) \ computer ptogunn product as eiamicd in daun 23, 
wbeiem srud d.uahase 1imbei..meiudes \\n each conjputci fdc ^^Ub.'.UM. •^'-^'^^[['^iJ speciiung 

t:Offifititef-t i fiti->'i-si^H'at ; fc'-lee ' ^ 

Mi\ compuier fde and an access Hag indicating whether access to said computer t\!e is 
detiied. 

2*t ({"^nginai) A compiuci piogutm piodutt cKumed ut ci^xnii \'K wbcicm said 
usscssTueiit (.omputci isopci.iblc m ai Ic.isi a lughci Icsei seeuat> nuxle and a icmcr ieve! 
sectirji^ niode. said assessment comptitei sli\ mg to dcn\ access to eieatei janRC ol 
coiupiiiLi llk^ uhen ttpetating in sdid luglici level sccnii!\ mode ttunpdicd wnh >ajd 
lower level security mode. 

2o (Ongma!) \ et>r!ipi tei progiam piodiict as ciannLd m cUmi 1"^. whcicin satd 
asscssmsHt compiuci is tnggesed totbangc trom said lowei le\e! seeuntx mode to sajd 
iugiier level scunnts nuidc b\ a lock down iiiggei message icccived at said assessment 
computer from a reiTJOte computer. 

27. (I're\ ious!\ }*rescnicd) A computer program product as claimed in ciauii 1 7. 
u herein a pUirality >>{" requesting compulses share access ii> an asscssmein compulse 1\ir 
deteunuiing viheihcr Hie access requests b> those requesting eomptners should be denied, 

28-33. (Canceiled) 

34, (Cairrently Amended) A method of detecting rnalware, said method 
comprising the steps of: 
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ucesMug at an d~,NCssmcm computci a file v^ccc~.s cLaiancc icquCNi li'om 
fCLjucsUnii tumputci. ^aui file .itccsv, ckMumcc icquc^L iiKlu(iiii<: daia idcnntX iii<: a 
coiupiuci lilc lo be ciLtesscd h\ said ictjucsunii tompulci. 

m dtptiidtiKC upon said data idcntj(\nig viid cunipLitti lik dv„ttimining i{ \aid 
uonipulci tiic hds pKMouhh been assessed . s Udl contdininq m<-iiv\<-itc and i/cucuunig a 
[lie .itccs- cltMiancc ic'-ponst, jud 

tuinHuauny lilt ati ess i loatain c Kspon^c tii vud tcqucstins^ tumputoi. 

wlicicin said asbCsNntCiU Lt>niputci sfoies a database oi computei U!e~, and said 
ddtahasc includes iot cdch ttunpuLct fdc a peisi^icnce flag nidJtaLnit: uhcllKi an cnttx 
jciatnig 10 said compt tot tiie should he pi ^L^d iiom said database dtiung purge 
operation a; 

\\liciem haul daiahd^e mciudes Iot each computet Ilie fields spcedymu . idcuanie 
of said v.t>mputci liic, data ldcnt1i\nl^ ^aid tegnestni^ tomputei and a stoTa^e loeation ol 
said conipuici iilc. aud a i-hcckstuu \a!ue cakuiaicd iumi satd Louiputoi tde 

"^^ fC UHciith ■\f)icndcil) A method as tlanucd in tlann i k wlicicin said data 
ideniif>njji saidcumputci Dk sntludcs [[a| jsajd chctUunt value talcuiaied nmi said 
computer file. 

({ unctttls \niended) \ method asLiatmcd uu lann wheicu! said data 
tdentiixniy s. id niuiputoi Ido mukides ouo oi uioic oi j ja] j sau! iilenaino oi said eonjpuiei 
file, said data identifying said requesting computer and [[a]] said storage location of said 
computer file, 

>7 (PicMousiy Piesentedl A. lucihod as cUiiiued ni claim >4. uheiem if said ule 
access clearance icspon.sc indicates a scan oi" said (.oniputer Hie is icquired b> said 
asscs-^meut (.omputcr. then iC4.cistng at said assessment 4.i>mputcr said eomputei file fiom 
sahi lequestini: cornpntcr and pcifonnmg a malwaie scan of said cornpuiei iiie 
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38. (I'rcviousK Presented) A methnd as ckumcd in claim 34, w herein ifscud file 
access ckMfdiice response indicdlcs dcecss lo said eonipulcr file is denied. Lheu uitigcriut: 
ft denied ;K-ee?.s lespvmse in said ;issest,iueiit etnnputci. 

39 ^PrcMouslx PicsciiteU) A niethud as ciciinied in elami 34, wheieni saul 
datalxKc orcomputcr iiles specilies whether rcspecfne eompuUr fikb contain malwiire. 

40. (Currentiv \niended) A method as claimed in cianii 3V, \shereni said database 
further mcluUcs fur each eompuicr fdc anothet ficldj js|| speed) inte oee-t- > y-HiOF < a ' f ' »t-t i 
filename of hasd compiiter file, data identifyuig satd requestnig compuier and a storage 
k->ird4^of[--<->i--Siti<i:<'o»ipfHi!>r--{^4i!*r-ii^<'hec4-siiffl--vii^Ui^ 

an access flag indicating wliether access to said computer Hie is denied. 

41. (Previousiy Preseriied) A method as cLnnjcd in eianu 34, uhcicni saul 
assessment eomptuer is operable m af least a higher le\e! ^ccunts mode and a Sower ic\el 
seeniit) mode, said a>scv,sf)ien! compute! senmg lo iien\ access to greater range of 
compute! iiles vshen operating m said higher iesel secuiUv mode compajed w^lh said 
lowei level socuti!) mode 

42 (PicxiOusK Puseniedt A method is cKumed ut eiaim 41, wbcicm ,said 
assessment Lomputei is iiiggeiet! to ciiauge fiom said lowei lesei socLUtt> mode to said 
highci icxcl seeiint\ mixle b\ a lock iiown tngger message reeencd at said assessment 
mmpmcj honi a ienK)le ct)U)putei 

4^ ( PieMouslv Piesemedl A. method as cianued m claim >4. uheiem a piuralitv 
ol lequesurig (.omputeis shau access to au as-,essnicni coiispuier tor determmmg whether 
file access reqiicsis by those requeating coniputeis should be domed 

U uncntK ,\meniied) ,\ method <>rdeteeting maiware, said meih<xl 
compn.siT5g th.e steps ol: 

detecting a 11 !e access request lo a ct>mputer il!e b\ arequestnig computer. 
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gcocfatsn^ a fiSc access clc;uance icqucst jncSuUiog dau idcmji\uiir vud fomputci" 

file: 

tiiUihiuiUfng bdhl rOe ftccosj. cicMranco ietjuc?.i Worn said requchimg conipuici lo d\i 
<isb^^\mcnl tomputci a\spoii$ihit ior jssCNsmcat. orv\!icthcf suti computer file oontaitks 
maiwarc; 

ivccivnig at said assessment computet said tile aov.cs.s v.ieamtKC !\qiK.st fVunt a 
reque.st.mg computer; 

in depciHiciice upnn saul datu idcntifyiiiir s;ud computer I'lie tietermnimg if said 
computcf file hd^ picMOu^h been assessed .is nut cttnlduiing nidK\dte iiud teenenuiuji a 
ti!c access clCvjrancc lesponse. 

tian'-nntiiag ■-aid Hit. access c!s.^t<uice asponsc to said lequestmg computer; 

Tcceis mg dt sau! lequestuig computet s. id tde . ceess cicaiance lesponse from 
-.iid assessment computer: and 

i{ sau! file aci.css (.ieaiani-c rcspoiisc indicates s. id (.umputcr ille docs noi eontani 
malwaie. then pernntinig said Hie access lequcst by saui lequestuie compuicu 

\\heieni saui assLssment computer sittrcs a datdKi^t oi cttmputct fiic^ and said 
database include^ !or cacil cooiputcr !de a persistence ilag jitUjcatJitL' svhcthci an entry 
i-cUuHit! lo said eon?putei lite should be putged tion? said database dui'nitj purtje 
operations; 

uhetem i^aul daiaba-^e mciudes fo; eacii i.ompute; file fields spcoii\m'j a iTlename 
ol said Lomputet flic, data Klentif>uiii s. id icquchtnig eoniputCT and a stuidiic location of' 
said com]?uter file, and a checlgs«iTi value calculated 

45 {L uncntls -XmendeJ) A iiicthod as i.!amtcd in clamri 44. \\ lietL-in said data 
ideutiixmu said coinputet fde n!*,lude^ [[.ij j said LliLxksLini \alue ^..jkuLued llum said 
computer file. 

4(i {L uiiCniK \mei-!iieJ} A method as >.lamied n"! cKnm 44. whcivin saui data 
itk-utii^ mg said computer fjie includes t>ne oi more [[a'|] said ilL-uame ^aid CiimputL-t 
file, sauLdaia tdentifutii; vnd ietiuej.liiig eompuiei and j|a|| viid siojage loeatiou ol said 
comp liter file. 
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47 (PrL\u>ush Pfcscnicdl A. tncilKxl cUutncd tn cLimi 4 4. uhctxtn ifsaki illc 
fta osh t IcciritiiLO ie?.jx>i)se indiCiUcs d slm o{ j,aid tompuici file is icquiicti b\ s<uJ 
v^ssv-.ssmcnf tomputci. then UvUisnutting said oompiucr illc iiom vnd aqucsuiig oompiitv„r 
to said dsscssnicnt computet, rcucu nig ui haid asscssnicni uonipulci sau! LompiacT flic 
[rom said icqucstjng v.untputci and pci funning a nulw. nc soati ofsfijd conipuici Idc 

4h (P{C\!uusly PiCscitled) A iiicihod as cianiicd m Llaim 44, whoi-cni il saul iUc 
,icc(,'ss clcaiancc icsptmsc indicalc^ :iccl^s h> said coiupuLct flic Js dtiiicd. ihcn titgycnng 
a denied access response m ^aid assc^sracni computer 

40 (PTCNunisly Pieseniedi \ lueihod as cianucd m Llaini 44, wherein d said idc 
access clearaiice response indicates acv.t,'-s to said v.untputci Ulc is denied, thcii inggenng 
a denied act.e*^s lesponse m saui lequesttng LOiupittci 

^0 (PrL\iuusK Picseniedl A. inetlKxl as clajincd ju eLiitii 44. v\lKrcin said 
database of computer files specifies whether i'espective computer tiles contain malwai'e. 

51, (Currently Amended) A .method as claimed in claim 50, wherein said databa,se 
furiher includes for each computer (lie another (leldll's)) spec i iy i i ig Oi-ie->:>r--fvie)-e-(:>t--a 
{■iieKaBwof"Saidi;f>?Hptiter"rile;--d 

loeatit>}>-e-t"6^a4d"et>}«-p-ut^-4Yl^"fi"e4^^ 

an access Hag iudicaiiiig vvlicthcr access to said computer file is denied. 

52, (Pi-eviousiy Presenied) A method as cUdmed in claim 44, wherein said 
assessment computer is operable in at least a higher level security mode and a lower level 
security mode, said assessment computer serving lo deny access to greater range of 
computer files when opcratiiig iii said higher level security mode compared with said 
lower level security mode. 
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53. (I'rcMOusK PjcscnicU) A inethnU as cluuncd ut claim 52, uhcicni saul 
as*>cssf)icn! conipuicr intigcivti lo L'hdiijiL- iiom y.nd lo\\cr loci scclhiL) mode to s.ikI 
highci ^e^e! set.uius nutde b\ d lock Jtmu UHijicr message }eck:i\ed at said as?.essmei)l 
con^pufer from a amofe computet. 

54, {Viw iOusK P!\.scnied( A method .is cUumcd ni cLiim 44. uheain s phm\h\\ 
orre(|nesUng computers sb.ne access lo ,ni asstssment coniputcf for detemimmg uhefhet 
flic actcss requests h> Ihosc rcqucstuiR cuniputeis siioidd he detncti 

55-60. iC'aiiceHed) 

ti 1 (l.'uirentis \mended) Appauutis ioi euiUioliing a compuier to detect niahs are, 
■^.iid apparatus compusuig 

a file access lequcst letcisei opeiable to rei-eive at an asscssmeru computer a isle 
access cleat vijice request Iroin a requcsunji (.onipuicr. saui file ut-cess clearance request 
including data idcnLii\ing a coniputcf fde to he accx-ssed hs said tequestuig coiupuLct; 

a idc acecss tleanmee response eciicrainr operable ut dependence upon said tiata 
ideniilXiiig said coniputei ille lo detern?iue ti said coniputei llle has pre\iousl\ been 
assessed as }u>t eoutdinmg malwaic iind u> geueiate a tdc access defiance iCsponsc. aiul 

a tile acces'i cleaiance response trausmutet uperable to iransmu said mIc acCsss 
cleaiance icsjjonsc to said lequesuug coiupuiei. 

wlu-tcin said assessment computer stores a database of computer files and ^aid 
database njcUides k>r each coniputei hie a pciSHteuee Hag nidiLamui vvhctlier ari eutr\ 
jclatsnji lo sajti couiptitcr tde should he purged iroui sajti database duunji purjic 
operauoiis; 

vtheicm said database includes tot each eoiiiputei tiie fields specihmg a lileuame 
iAL'>Jijd.C(.>Jiu?ii!er.]ile...iL^ 

sahl contpuier fde, aud a ehe>.l,sunt xakiC >.aleu!Aied fiotn said coniputLi file . 
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b2, ((. uaciuK Amcnticd) Apparatus as claniicd ni cUxm f>1, \\hc^Cin ^aid dMa 
ak'uttixtny s.ud cumputci !j1c includes | jaj j sdid L'hLck^oni \ .ilftc cakukiLcti ftutn s.ud 
computer die. 

6 > {,i LUicnih \mctuicd} Appaiatuh us cLnincd iu cLnni 61, bdid dau 

idi.nt{U\ ing s.ud computet fde includes one or moie [[.i'|]sjid OLntume -aid oompukn 
fde. !-aul dau tdcntii\itii? said lequcsuug cotnputei and [[a||suid sioiage location ol said 
computer file. 

04 U'ic\ lousK Ficsentcd) \ppajatus as claimed iit eiaim oL uhcicsn it said tile 
acces-i ckMidiice ic-ipon^c tudtLdtcs d scan M said cornpuici Idc is K\jutied b\ sjid 
assosDicni LODipuicf iheii a cuiuputci idc TecciscT is opciabte lo leucise ai >aid 
assessment v-omputci said computet isle iunn said iequ^sinig computet and pcitomnng a 
iualwaic scaii suid Luiupittot isio 

<is (PicxiuusK Pfcsenicdl A.pp if jLumis claimed ju cLnni 61 v\hcicin it sdid !lle 
aetcss tleauuicc lespouse indieatcs access u> s.ud coiitputci idc is domed, theii Ui^igcnn^i 
a ilcmcd access icsponse m sdid assessmcni computcf 

fif' (Ticx iOusK Piesetik'dt \ppaiatus u- claimed m eiuim 6l, v\|iciC!n said 
datdbusc oi c(>iitj>utei fdv-s specilies uiiciher icspective Lompntor files contcnii ni<-dv\aiv- 

(^7 (C usionih Vniended) \ppaiittus as chutucd m cLiini 66 nliciCfn said 
tlaiabasc iurther includes lor each I'dmpuici Uk- aa»uhLi tteidll'sj] specs i\ nig one *>t moF^ 

sloiAv-vlv>c.>thm k4 Sv-tid-tomptiicH Acbc^ks-tim vAUK>calcuk>t<:d tiv>m sAi4cv>mpuiet 

4ikMtf54-an access flag indicating whether access to said computer file is denied. 

<>>^. tFicx iOUsK PreseniL-di Apparaius as claijned m ciaim 61, \\bcrcm said 
assesstneni cotnpuicr is operable m ai least d highci le\el seciiiity mode and a louer lex el 
-L-cuEity nK>dc, wid assessment ct>mpiuer ser\ mg iv dcn> acecs^r. to greaier range of 



computer IjIcs when opcraUng in said higher level security mode cooiparcd wuh said 
lower level security mode. 

f Pic\iiU!\!> PiCNttited) Appvuatiis as cLnmeti m tUum 6S. \vhv„jcni said 
. sscs^niLUt (.omputci is ttteycied to change rtoni said low ci lc\ el set.unt\ mode lo sau! 
high^i Icsci st,cuius mode b\ s look down tnggei message stxciscd .it said assessment 
corapiiier from a remote computer. 

70. (Previoiisly Preseiited) Apparatus as claimed m claim 61, wherein a pluraliiy 
ot" requesting computers share accciss to an aissessment computer for determining whether 
flic access requests by those requesting computers sh(>nid be denied. 

7! . fCnrrentiy Amended) Apparatus tor controlling a computer to detect malvvare. 
said apparatus comprising: 

a fiie access request detector operabie to detect a file access request to a computer 
file by fi requesting computer; 

a iUe access clearance request generator operable to generate a file access 
clearance request including data identifying said computer fde; 

a tl!e access clearance request transnvittcr operable to transmit said tl!e access 
clearance request from said requesting computer to an assessment enmpnter responsibie 
for asscssnjcnt of whether said computer tile contains maKvarc; 

a file access clearance request receiver operable to receive at said assessment 
computer said file access clearance request from a requesting eonvpuier; 

a file access clearance response generator operable in dependence upon said data 
identifying said computer llle to determine if said computer file has previously been 
assessed as not containing mahvarc and to generate a file access clearance response; 

a file access clearance response transmitter operable to transmit said tile access 
clearance response io said requesting computer; 

a tile access clearance response receiver (Operable to receive at said requesting 
computer said llle access clearance rcspotisc irom said assessmetu computer; and 
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iWc access pcrnu^sjoo m\i operable jfsvUd fMc vK'ccss clearance fespun^e 
indiLMics y.nd conipuler file Jol-^ iittt conLdin nLilwdtv Lo pctmi! saui file iiceess tcqucst 
bv said i-eqiiest,i.og compiucr; 

uheRin said asscssniciit Lomputci s{oics a dataha.sc of oompiitv„r fi!v„.s sud ■^jlkI 
ddtahase nsuludes toi e<-n_h eomputct hie a peisistctsue tlaq nidicauiig \sbetiici an ctsUx 
!\iating to said compuier nie should K punjed tiom ^.aid d.itaba^,e during purg^ 
operaljons.; 

\Nhc-tein said datahiuse tnciudes lor each tompuier liie fields spccilymg a lilcnatne 
of said ctunpuLcr ilit\ ddUi ldenuf\ln^ said tequesUn^ euinputct and a suna^e location oi" 

72 (l.'uircntl\ \inended) Appuiains as claimed m ulann ""l. uheTCUi said data 
ideniif\nig ■^aid computet ille includes [[.i'|] said checksum value cdcuLited from ■^aid 
computer file, 

(C uirciitls ■Amended) AppataLns ix^ cL'umcd ni claim 7], therein said daLa 
ideniifvmji said compute! tile iOtludes oue m more oi jja] j ^aid fdenanie oi ^ani eompuiei" 
fde. satd data identtf>nig said tequesiing Lomputct and j Ja]] said stoiMuc loLauon of said 
computer file, 

74. ( Previously Presenled) Apparatus as claimed inelaitn 71, wherein if said file 
access clearance response indicates a scan of said computer file is required by said 
assessment computer, then a eonipittcr file trarismiiter is operable to trarismit said 
c(niipuier iiie from said requesting ccniipuier to said assessment computer, receiving at 
said assessment coinpuier said computer file iron? said reqtiesting computer and 
performing a mahvarc scan oi'said convpuier i'ile. 

75, (Pre\ iously Presented) Apparatus as claimed in claim 71, wherein if said file 
access clearance response indicates access to said computer file is denied, then triggering 
a denied access response in said assessfnent computer. 
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"'fi (lhc\ lOusK Pjc~,cnicU) Appauitus v^s clauned ut cLnm "L uhcicni U said t\lc 
aLccs^ ckMtdiitc R^pon^L iiKhLdlcs litccs^ lo >;ud conipulci file is denied lUlu l^it:^c^ut: 
ft dcuicd .uccss icspvmsc ui said icqucstuig computer 

"'T ^PicMouslx PiLsciitcU) Appaidtijs as cLnnia! in ciatm "i . s<-iiU 
(iatabast, ofv-omputci [ilcs spec i lies whcthei icspetfne compuUi fiks v-oiUfim ntfihA.uc 

7h ((.^in'entK \nicndcd) \ppauuiis as civUnied m tlaiin "7, whei-em said 
Udlahase furliKi iikIuUls ftn cachconipuief file anuUict ilcidj [^jj spec i1\ nig eee oi e 
n| lilename of s.ud con i putet lile. data identUvnig s aid reque s ting computet at i d a 

■ fit»a«d- an access flag indicaling whether access to said computer file is denied, 

79. (Previousiy Preseriied) Apparatus as cluinied m ciauu "] . \sfieiesu said 
a!>ses:>meni eompuier is operable m least a higher le\e! ^ceunts mode and a !fn\er ie\el 
seem UN mode, said asscssmen! eomputer sen iug lo den\ access to givater range of 
computer iilcs vshen operatiiie in. siud higher lesel scctuitv mode compiucd w^lh said 
lower knel scenriiy mode. 

50, (Prex iousK Pr^seniedt Apparatus a- clauned nt eiaim 79, vxhciCin said 
assessDicfU coDiputei is trtggeiet! to chaugc fioin said iowei lesei seciuit) Diode to said 
higher iexel seeunty mixle b>- a lock iiown trigger niessage reeejxed at said assessment 
eompiiter fioni a ienjt)te ct)ii)piiter. 

51, (Pi-exiuusly Presented) Apparatus as *,laiined iuehiim "1. wherein a plurality 
ol lequesiiTig (.omputers share access to an assessinciii computer tor detennmiog whether 
file access reqiiesis by those requesting conipuiers siu^dd he denied 

82. (Canccifed) 



